Traffic Trace Info
DumpFile: 200903312200.dump
FileSize: 1147.07MB
Id: 200903312200
StartTime: Tue Mar 31 22:00:00 2009
EndTime: Tue Mar 31 22:15:00 2009
TotalTime: 899.46 seconds
TotalCapSize: 893.17MB CapLen: 96 bytes
# of packets: 16627641 (11773.71MB)
AvgRate: 109.80Mbps stddev:13.96M
IP flow (unique src/dst pair) Information
# of flows: 818010 (avg. 20.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 4.1% 2.0% 1.7% 1.7% 1.4% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 529175
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.2% 8.8% 7.9% 7.6% 7.6% 4.7% 4.2% 4.2% 3.5%
# of IPv6 addresses: 2128
Top 10 bandwidth usage (bytes/total in %):
46.8% 46.7% 18.8% 9.7% 9.6% 6.0% 6.0% 2.9% 2.5% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312200.pktlen.png)
detailed numbers
[ 32- 63]: 3247985
[ 64- 127]: 3863764
[ 128- 255]: 929201
[ 256- 511]: 428203
[ 512- 1023]: 366195
[ 1024- 2047]: 7792293
Protocol Breakdown
![[protocol breakdown chart]](200903312200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16627641 (100.00%) 12345625187 (100.00%) 742.48
ip 16513835 ( 99.32%) 12332151941 ( 99.89%) 746.78
tcp 12204257 ( 73.40%) 10993788301 ( 89.05%) 900.82
http(s) 5223463 ( 31.41%) 7124683147 ( 57.71%) 1363.98
http(c) 2717568 ( 16.34%) 243750154 ( 1.97%) 89.69
squid 558904 ( 3.36%) 412729828 ( 3.34%) 738.46
smtp 372519 ( 2.24%) 72454817 ( 0.59%) 194.50
ftp 596323 ( 3.59%) 583846907 ( 4.73%) 979.08
pop3 10769 ( 0.06%) 8029851 ( 0.07%) 745.64
imap 3156 ( 0.02%) 820603 ( 0.01%) 260.01
telnet 5599 ( 0.03%) 2087379 ( 0.02%) 372.81
ssh 688752 ( 4.14%) 941853269 ( 7.63%) 1367.48
dns 20317 ( 0.12%) 5636138 ( 0.05%) 277.41
bgp 131 ( 0.00%) 47328 ( 0.00%) 361.28
napster 17 ( 0.00%) 1465 ( 0.00%) 86.18
realaud 64 ( 0.00%) 13830 ( 0.00%) 216.09
rtsp 6926 ( 0.04%) 8652713 ( 0.07%) 1249.31
icecast 315 ( 0.00%) 23422 ( 0.00%) 74.36
hotline 4 ( 0.00%) 582 ( 0.00%) 145.50
other 1999399 ( 12.02%) 1589155008 ( 12.87%) 794.82
udp 2977065 ( 17.90%) 1171643681 ( 9.49%) 393.56
dns 1281410 ( 7.71%) 258311528 ( 2.09%) 201.58
realaud 17988 ( 0.11%) 8250284 ( 0.07%) 458.65
halflif 51 ( 0.00%) 5155 ( 0.00%) 101.08
starcra 52 ( 0.00%) 9845 ( 0.00%) 189.33
everque 74 ( 0.00%) 15040 ( 0.00%) 203.24
unreal 20 ( 0.00%) 3235 ( 0.00%) 161.75
quake 27 ( 0.00%) 3116 ( 0.00%) 115.41
cuseeme 9 ( 0.00%) 908 ( 0.00%) 100.89
other 1677209 ( 10.09%) 904851356 ( 7.33%) 539.50
icmp 1290190 ( 7.76%) 154945197 ( 1.26%) 120.09
ipip 296 ( 0.00%) 36542 ( 0.00%) 123.45
ipsec 112 ( 0.00%) 17616 ( 0.00%) 157.29
ip6 28254 ( 0.17%) 9246377 ( 0.07%) 327.26
other 13661 ( 0.08%) 2474227 ( 0.02%) 181.12
frag 52618 ( 0.32%) 57409717 ( 0.47%) 1091.07
ip6 113806 ( 0.68%) 13473246 ( 0.11%) 118.39
tcp6 91515 ( 0.55%) 9616253 ( 0.08%) 105.08
http(s) 180 ( 0.00%) 234572 ( 0.00%) 1303.18
http(c) 2565 ( 0.02%) 226473 ( 0.00%) 88.29
squid 23 ( 0.00%) 1946 ( 0.00%) 84.61
smtp 447 ( 0.00%) 153926 ( 0.00%) 344.35
dns 8 ( 0.00%) 1107 ( 0.00%) 138.38
bgp 371 ( 0.00%) 31972 ( 0.00%) 86.18
other 87921 ( 0.53%) 8966257 ( 0.07%) 101.98
udp6 18385 ( 0.11%) 2911347 ( 0.02%) 158.35
dns 16410 ( 0.10%) 2580422 ( 0.02%) 157.25
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1974 ( 0.01%) 330816 ( 0.00%) 167.59
icmp6 3369 ( 0.02%) 468166 ( 0.00%) 138.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 507 ( 0.00%) 473400 ( 0.00%) 933.73
tcpdump file: 200903312200.dump.gz (397.54 MB)